Roundcube

Trends

1
Phishing site flagged impersonating Roundcube webmail●Possible Phishing 🎣 on: ⚠️hxxps[:]//roundcube-808[.]weebly[.]com 🧬 Analysis at: https:// urldna.io/scan/6ac488213b77500Mmastodon Technology Cybersecurity21 h ago
Security researchers have flagged a suspected phishing page hosted on a weebly.com subdomain mimicking Roundcube webmail. The URL has been defanged to prevent accidental clicks, and a public scan of the site has been published for others to review. The warning circulated among infosec communities, who shared it with tags for phishing, scam and cybersecurity awareness.
2
Roundcube Webmail SQL Injection Flaw Actively Exploited▼Roundcube Webmail SQL Injection Vulnerability CVE-2026-48842 Under Active Exploitation Roundcube Webmail high-severity SMmastodon Technology Cybersecurity22 d ago
A high-severity SQL injection vulnerability in Roundcube Webmail, tracked as CVE-2026-48842, is under active exploitation. The flaw resides in the virtuser_query plugin and allows unauthenticated attackers to compromise servers running the popular open-source webmail software. Security administrators are being urged to patch affected installations immediately and check systems for signs of compromise.